Privacy Policy — mia4d

mia4d (accessible at https://mia4d.vip) is an internationally licensed online sports betting and casino platform designed for adult Indonesian players aged 21 and above. As part of delivering our services — which include sports betting on competitions such as BRI Liga 1, EPL, La Liga, and the Champions League; live casino games; slot titles from studios such as Pragmatic Play, Evolution Gaming, and Pocket Games Soft; and daily togel (Indonesia's traditional numbers lottery) draws — we necessarily collect and process personal information about the individuals who use our Platform.

This Privacy Policy applies to all personal data processed by mia4d in connection with your use of the Platform, whether you access it via desktop browser, mobile browser, or any other interface. It covers data collected at registration, during account activity, through payment transactions, via our customer support channels, and through automated technologies such as cookies and session logging.

This Privacy Policy should be read alongside our Terms & Conditions, which govern the overall contractual relationship between you and mia4d. In the event of any inconsistency between this Privacy Policy and the Terms & Conditions on a privacy-related matter, this Privacy Policy takes precedence.

mia4d operates as a data controller in respect of the personal data you provide to us. We are responsible for ensuring that your data is processed lawfully, fairly, and transparently, and that it is kept secure and accurate throughout its lifecycle on our systems.

mia4d collects personal data in the following categories, depending on how you interact with the Platform:

2.1 Registration & Identity Data

• Full legal name (as it appears on your Indonesian national identity card, KTP, or passport)
• Date of birth (used to verify that you meet the 21+ age requirement)
• Residential address in Indonesia (city, province, postal code)
• Email address and mobile phone number (used for account communications and two-factor authentication)
• Username and encrypted password

2.2 KYC Verification Documents

• Scanned or photographed copies of government-issued identity documents (KTP, passport, or SIM)
• Proof of address documents (bank statements from BCA, BRI, BNI, Mandiri, CIMB Niaga, or utility bills)
• Selfie photographs submitted for liveness verification where required

2.3 Financial & Transaction Data

• Bank account details (account number, account holder name, bank name — e.g., BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata)
• E-wallet identifiers linked to your Account (OVO, DANA, GoPay, ShopeePay, LinkAja)
• Deposit history, withdrawal history, and transaction amounts in Indonesian Rupiah (IDR)
• Bonus and promotion redemption history

2.4 Gaming & Betting Activity Data

• Betting history across all products (sportsbook, live casino, slots, togel)
• Game session durations, wager amounts, win/loss records, and RTP outcomes
• Responsible gaming tool usage (deposit limits set, self-exclusion requests, cooling-off periods)

2.5 Technical & Device Data

• IP address and geolocation data (city-level, used for fraud detection and market compliance)
• Browser type, version, and operating system
• Device identifiers and screen resolution
• Session timestamps and page navigation logs
• Referring URL (the site or search engine that directed you to mia4d)

2.6 Communications Data

• Records of live chat conversations, email correspondence, and support ticket exchanges with mia4d's customer service team
• Any feedback, complaints, or dispute submissions you submit through the Platform
• Marketing preference records (opt-in and opt-out status for promotional emails and SMS)

mia4d uses the personal data we collect for the following specific purposes:

• Account Management: To create, maintain, and administer your mia4d Account, including authentication, password recovery, and profile updates.
• Service Delivery: To process your bets and wagers, settle outcomes across our sportsbook, live casino, slots, and togel products, and credit winnings to your Account balance in IDR.
• Payment Processing: To facilitate deposits and withdrawals via your registered Indonesian bank account (BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, Bank Permata) or e-wallet (OVO, DANA, GoPay, ShopeePay, LinkAja). Financial data is passed to payment processors only to the extent necessary to execute the transaction.
• Identity Verification (KYC): To verify your identity and age (21+) in compliance with mia4d's anti-money laundering (AML) framework and responsible gaming obligations. KYC documents are reviewed by mia4d's compliance team and, where applicable, by our accredited third-party identity verification partner.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and any other activity that violates our Terms & Conditions. This includes automated pattern analysis of betting behaviour and transaction flows.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling, to enforce self-exclusion requests and deposit limits, and to proactively reach out to players whose activity suggests potential harm. Please visit our Responsible Gaming page for full details of available tools.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance through our 24/7 live chat and email support channels.
• Legal & Regulatory Compliance: To fulfil mia4d's obligations under its international gaming licence, applicable data protection frameworks, and any lawful requests from competent authorities.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the Platform's performance, user experience, and product offering. Individual players are not identified in this analysis.
• Marketing Communications: To send you promotional offers, bonus notifications, and news about new games or events — but only where you have opted in to receive such communications. You may withdraw your marketing consent at any time through your Account settings or by contacting our support team.

mia4d processes your personal data on one or more of the following legal bases, depending on the purpose of each processing activity:

• Contract Performance: Processing that is necessary to deliver the mia4d service under the contractual relationship established when you register an Account and accept the Terms & Conditions. This covers account management, betting and gaming service delivery, and payment processing.
• Legal Obligation: Processing required to comply with applicable legal and regulatory requirements, including AML obligations, KYC verification, record-keeping requirements under mia4d's international gaming licence, and responses to lawful authority requests.
• Legitimate Interests: Processing carried out for mia4d's legitimate business interests — such as fraud prevention, security monitoring, responsible gaming oversight, and platform optimisation — where those interests are not overridden by your privacy rights. mia4d conducts a legitimate-interests assessment before relying on this basis for any new processing activity.
• Consent: Processing that is based on your freely given, specific, and informed consent — primarily marketing communications. Where consent is the legal basis, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

mia4d does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share personal data only in the following controlled circumstances:

• Payment Processors: We share the minimum necessary financial data with our payment processing partners — including Indonesian bank transfer gateways and e-wallet providers such as OVO, DANA, GoPay, ShopeePay, and LinkAja — to facilitate your deposit and withdrawal transactions. These partners operate under binding data protection agreements with mia4d.
• Identity Verification Services: We may share KYC documents and identity data with accredited third-party identity verification providers for the purpose of fulfilling our age-verification and AML obligations. All such providers are contractually bound to use your data exclusively for verification purposes.
• Game Studio Providers: When you play games hosted by third-party studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Pocket Games Soft — limited session data (such as player ID and game session tokens) is shared with the relevant studio's game server to deliver the game experience. Game studios do not receive your full identity or financial data.
• Customer Support Platforms: Our live chat and ticketing systems are operated by third-party customer support technology providers. Support conversations are stored on these platforms under data processing agreements that restrict use to service delivery only.
• Regulatory & Legal Authorities: mia4d may disclose your data to competent authorities, law enforcement agencies, or regulatory bodies where required to do so by a lawful order, court process, or under the terms of mia4d's operating licence. We will notify you of any such disclosure where we are legally permitted to do so.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of mia4d's assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and your rights under this Privacy Policy will continue to apply.

All third-party data processors engaged by mia4d are required to implement appropriate technical and organisational security measures and are contractually prohibited from using your data for any purpose beyond the specific service they provide to mia4d.

mia4d uses cookies and similar tracking technologies to operate the Platform, improve user experience, and support our security and analytics functions. Cookies are small text files placed on your device when you visit mia4d.vip. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They manage your login session, maintain your Account authentication state, remember your language and currency preferences, and enable core security features such as CSRF protection. These cookies cannot be disabled without preventing core functionality.
• Performance & Analytics Cookies: These cookies collect anonymised data about how visitors use the Platform — including which pages are visited most frequently, how long sessions last, and where users encounter errors. This data is used exclusively to improve Platform performance. No individual player is identified in this analysis.
• Functional Cookies: These cookies remember your personalisation choices — such as your preferred bet display format, odds format (decimal), and responsible gaming reminder intervals — so that you do not need to reconfigure them on each visit.
• Security Cookies: These cookies support our fraud-detection and bot-prevention systems by tracking device fingerprints, session integrity signals, and unusual navigation patterns. They are essential to protecting your Account and the integrity of the Platform.

mia4d does not use third-party advertising cookies or retargeting pixels that track your activity across other websites. The cookies we deploy are limited to those necessary for the Platform's operation, security, and improvement.

mia4d retains your personal data only for as long as is necessary for the purposes for which it was collected, and in compliance with our legal and regulatory obligations. The specific retention periods applicable to each category of data are set out in the table in Section 2 of this Policy.

Key retention principles applied by mia4d include:

• Active Accounts: All personal data associated with an active mia4d Account is retained for the full duration that the Account remains open and operational.
• Closed Accounts: Following voluntary or involuntary account closure, mia4d retains certain data categories for the post-closure periods specified in Section 2, primarily to satisfy AML record-keeping obligations (7 years for financial and KYC data), to handle any residual disputes or legal claims (3–5 years for account and gaming data), and to maintain self-exclusion records permanently to prevent re-registration by excluded individuals.
• Anonymised Data: Aggregated, anonymised data (from which no individual can be identified) may be retained indefinitely for statistical analysis and Platform improvement purposes.
• Data Deletion Requests: Where you request deletion of your personal data, mia4d will honour that request to the extent permitted by law. Some data categories (particularly KYC documents and financial transaction records) are subject to mandatory retention periods under mia4d's licensing obligations and cannot be deleted before those periods expire, regardless of a deletion request.

mia4d implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or device and the mia4d Platform is encrypted using industry-standard 256-bit SSL/TLS protocols. Look for the padlock icon and "https://" prefix in your browser's address bar when accessing mia4d.vip.
• Encrypted Data Storage: Sensitive personal data — including KYC documents, payment account details, and authentication credentials — is stored in encrypted form on secured servers. Passwords are hashed using a modern, one-way hashing algorithm and are never stored in plain text.
• Access Controls: Access to personal data within mia4d's systems is restricted on a strict need-to-know basis. Staff members are granted access only to the data categories relevant to their specific operational role. All access events are logged and audited regularly.
• Two-Factor Authentication (2FA): mia4d supports and encourages the use of two-factor authentication for Account login. 2FA adds a second layer of identity verification, significantly reducing the risk of unauthorised account access even if your password is compromised.
• Penetration Testing & Security Audits: mia4d engages independent cybersecurity specialists to conduct regular penetration testing and security audits of its Platform, infrastructure, and data handling systems.
• Incident Response: In the event of a confirmed data breach that poses a significant risk to affected individuals, mia4d will notify impacted Account holders without undue delay and will take all necessary steps to contain the breach, mitigate harm, and report to relevant regulatory bodies as required.

While mia4d employs robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own Account credentials and for ensuring that your device is free from malware. Contact our support team immediately if you suspect that your Account has been compromised.

As an individual whose personal data is processed by mia4d, you have the following rights in respect of your data. To exercise any of these rights, contact our privacy team at support@mia4d.vip:

• Right of Access: You have the right to request a copy of the personal data that mia4d holds about you. We will provide this information in a commonly used electronic format within 30 days of a verified request.
• Right to Rectification: If any personal data held by mia4d is inaccurate or incomplete, you have the right to request that it be corrected or updated. Most registration data can be updated directly through your Account settings; for identity document corrections, please contact our KYC team.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and there is no other legal basis for processing), or where the data has been processed unlawfully. This right is subject to our mandatory legal retention obligations, as described in Section 7.
• Right to Restriction: You may request that mia4d restrict the processing of your personal data in certain circumstances — for example, while the accuracy of data is being contested, or where processing is unlawful and you prefer restriction over erasure.
• Right to Data Portability: Where processing is based on your consent or on a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that it be transmitted directly to another data controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on mia4d's legitimate interests. You also have an absolute right to object to the use of your data for direct marketing purposes at any time.
• Right to Withdraw Consent: Where processing is based on your consent (primarily marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

mia4d will respond to all verified privacy rights requests within 30 calendar days. In complex cases, we may extend this period by a further 60 days, in which case we will notify you within the initial 30-day window and explain the reasons for the extension.

mia4d operates a strict 21+ access policy. The Platform is not intended for, and does not knowingly collect personal data from, any individual under the age of 21. The collection of personal data from minors on a gambling platform would be contrary to mia4d's responsible gaming principles, its licensing obligations, and applicable child protection standards.

All Account registrations require confirmation that the applicant is 21 or older. mia4d uses both automated age-screening (based on the date of birth provided at registration) and manual KYC document review to enforce this requirement. Where mia4d has reasonable grounds to believe that an Account holder may be under 21, the Account will be suspended immediately and all withdrawal activity halted pending satisfactory proof of age.

If you are a parent or guardian and believe that a minor in your care has registered an Account on mia4d, please contact us immediately at support@mia4d.vip. We will investigate the matter promptly, close the Account if the age concern is confirmed, and securely delete all personal data associated with the Account in accordance with our data retention obligations.

mia4d reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, updates to applicable law, enhancements to our Platform, or changes to the range of products and payment methods we offer. When we make material changes to this Policy, we will:

• Update the "Last Updated" date at the top of this page and in the hero banner above.
• Display a prominent notice within the Platform or send a direct notification to your registered email address where the changes are material and directly affect your rights.
• In the case of significant changes to how we use your data for marketing purposes, seek fresh consent where required.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data. Continued use of the mia4d Platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with the revised Policy, you should discontinue use of the Platform and contact our support team to request account closure.

If you have any questions, concerns, or requests related to this Privacy Policy or to the handling of your personal data by mia4d, please contact our privacy team through the following channel:

• Email: support@mia4d.vip (plain text — not a clickable link)
• Live Chat: Available 24 hours a day, 7 days a week, via the live chat widget accessible after logging in to your mia4d Account.
• Response Time: mia4d aims to acknowledge all privacy-related enquiries within 24 hours (WIB) and to provide a substantive response within 30 calendar days.

For concerns specifically related to responsible gaming — including requests for deposit limits, session time alerts, cooling-off periods, or self-exclusion — please visit our dedicated Responsible Gaming page, where full details of available tools and support resources are provided in English.

For general platform questions and account support, our FAQ page covers the most common topics including registration, deposits and withdrawals via local Indonesian banks and e-wallets, KYC, bonuses, and game rules.